$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6509623-abdc-366a-9b44-a90f59cbe42c.roa File: f6509623-abdc-366a-9b44-a90f59cbe42c.roa (raw, json) Hash identifier: 8hZSt68Ezn5dZ6MCsQw5AHWjV0WKNyNNtFyub/oSoxY= Subject key identifier: BD:28:6F:71:80:F3:68:1C:5B:49:F2:3D:60:92:51:F4:CE:D4:93:2E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B540C9872F37D84FD9BFAEB20 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6509623-abdc-366a-9b44-a90f59cbe42c.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 34979 IP address blocks: 2001:470:405::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:98:72:f3:7d:84:fd:9b:fa:eb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=8f0957ba-609f-454b-938f-b816ae234cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4f:9d:ec:e4:2f:46:a1:80:fa:7a:e2:ac:c5: 9d:ee:70:72:02:fc:f4:53:7f:3d:f4:a3:17:b2:8e: 2b:3c:3f:8d:c4:b4:4f:34:3c:3f:8d:b1:4e:3c:9e: 66:f5:19:01:f1:85:b5:e4:e2:01:49:74:c6:6c:50: cb:8f:fe:77:39:bf:64:f3:73:75:6f:cf:91:25:1a: 86:78:2f:75:01:02:55:8f:57:dc:7d:8d:14:a1:aa: de:cb:6f:de:7c:3f:40:74:50:67:26:64:61:77:11: f3:4f:40:82:da:89:28:9f:20:76:a2:84:32:c3:53: c2:72:3e:7b:da:79:49:fd:f5:93:d8:c3:49:7d:bf: 5c:3f:36:84:29:82:fb:50:be:d6:94:8d:41:6f:a9: ac:45:ff:8e:e6:14:2e:44:af:40:6d:39:a4:4b:59: b4:0c:67:0d:19:d5:ff:7a:9a:3e:f1:95:84:e8:5b: 33:77:20:4d:06:ab:c6:6f:61:a3:34:35:39:9c:9f: c1:37:89:a5:fb:d2:6c:87:f8:9f:bc:92:57:ee:19: 8c:59:99:af:52:0d:96:b6:d2:6b:0b:c2:2b:dd:09: a2:8f:b2:c6:db:6d:c7:4f:65:19:25:35:ac:22:af: bf:f1:44:ee:ed:5d:0a:2a:33:28:e3:c4:f9:86:19: 13:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:28:6F:71:80:F3:68:1C:5B:49:F2:3D:60:92:51:F4:CE:D4:93:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6509623-abdc-366a-9b44-a90f59cbe42c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:405::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9d:86:31:80:68:4d:12:48:bd:84:07:37:0d:ac:08:8a:8a: 8d:f5:8e:eb:e7:87:ce:13:90:45:ac:1e:73:a3:ab:63:91:c6: be:e2:6c:02:63:ad:e4:bb:1e:7f:8c:4f:e5:96:ae:5c:30:1f: a9:52:24:1f:e8:7a:55:43:cf:5b:fb:0c:ef:29:5e:c3:30:b6: e0:78:42:a8:f2:44:3a:2c:9e:e7:26:99:15:09:1f:e2:7a:fd: 39:34:7b:a9:41:fc:81:13:f1:ff:20:99:f3:f0:7f:a7:22:b5: ee:43:99:32:69:01:82:00:ea:74:f4:fc:89:d9:76:77:18:d2: 5a:76:a7:67:8f:6f:7d:e0:3e:d8:5b:b7:bb:06:4f:ae:25:05: f2:23:7a:48:c6:5e:66:91:4e:43:a1:9f:8d:6b:c9:0f:f5:35: 0d:c0:33:30:1c:f2:c3:9d:b9:dd:9f:49:6a:11:c2:4f:9c:d8: 89:50:b1:b3:0e:8e:29:46:dc:56:d0:30:68:14:4c:ee:f9:91: 2e:68:7d:88:a2:65:9a:29:ee:eb:cf:b8:51:c7:73:f7:91:d9: 42:4f:9a:14:41:9a:c1:1c:a2:eb:54:0f:a6:12:55:78:78:9c: 47:3d:47:ae:61:35:1e:59:26:70:4a:1f:b0:fe:51:7a:bd:47: f2:7a:81:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtUDJhy832E/Zv66yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk OGYwOTU3YmEtNjA5Zi00NTRiLTkzOGYtYjgxNmFlMjM0Y2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE+d7OQvRqGA+nrirMWd7nByAvz0U3899KMX so4rPD+NxLRPNDw/jbFOPJ5m9RkB8YW15OIBSXTGbFDLj/53Ob9k83N1b8+RJRqG eC91AQJVj1fcfY0Uoarey2/efD9AdFBnJmRhdxHzT0CC2okonyB2ooQyw1PCcj57 2nlJ/fWT2MNJfb9cPzaEKYL7UL7WlI1Bb6msRf+O5hQuRK9AbTmkS1m0DGcNGdX/ epo+8ZWE6FszdyBNBqvGb2GjNDU5nJ/BN4ml+9Jsh/ifvJJX7hmMWZmvUg2WttJr C8Ir3Qmij7LG223HT2UZJTWsIq+/8UTu7V0KKjMo48T5hhkTlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL0ob3GA82gcW0nyPWCSUfTO1JMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjY1MDk2MjMtYWJkYy0z NjZhLTliNDQtYTkwZjU5Y2JlNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGGdhjGAaE0SSL2EBzcNrAiKio31juvnh84TkEWsHnOjq2ORxr7i bAJjreS7Hn+MT+WWrlwwH6lSJB/oelVDz1v7DO8pXsMwtuB4QqjyRDosnucmmRUJ H+J6/Tk0e6lB/IET8f8gmfPwf6cite5DmTJpAYIA6nT0/InZdncY0lp2p2ePb33g Pthbt7sGT64lBfIjekjGXmaRTkOhn41ryQ/1NQ3AMzAc8sOdud2fSWoRwk+c2IlQ sbMOjilG3FbQMGgUTO75kS5ofYiiZZop7uvPuFHHc/eR2UJPmhRBmsEcoutUD6YS VXh4nEc9R65hNR5ZJnBKH7D+UXq9R/J6gSE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:57 2025 by rpki-client